REMARKS 



Applicant has carefully studied the outstanding Office Action in the 
present application. The present response is intended to be fully responsive to all points 
of rejection raised by the Examiner and is believed to place the application in condition 
for allowance. Favorable reconsideration and allowance of the application are 
respectfully requested. 

Application as examined included claims 1-243. Claims 89-1 12, 148-171 
and 207-230 are withdrawn. Claims 1, 23, 45, 67, 126 and 185 are amended. Claims 2- 
22, 24-44, 46-66, 68-88, 1 13-147, 172-184, 186-206 and 231-243 are unchanged. 

The abstract of the disclosure is objected to by the Examiner as failing to 
meet the minimum length requirement of 50 words. Applicant respectfully submits that 
the length of the abstract as filed and as published is 56 words and requests withdrawal 
of this objection. 

Claims 1-14, 17-22, 67-80 and 83-88 stand rejected under 35 U.S.C. 
102(e) as being anticipated by Le Pennec et al (US Patent Application Publication 
2001/0020272). 

Claims 23-36, 39-40, 44, 126-139, 142-143, 147 and 172-184 stand 
rejected under 35 U.S.C. 102(e) as being anticipated by Stewart et al (US Patent No. 
6,901,519). 

Claims 15-16, 45-66, 81-82 and 185-206 stand rejected under 35 U.S.C. 
103(a) as being unpatentable over Le Pennec. Claims 113-125 and 231-243 stand 
rejected under 35 U.S.C. 103(a) as being unpatentable over Le Pennec and further in 
view of Touboul et al (US Patent No. 6,154,844). 

Claims 37-38 and 140-141 stand rejected under 35 U.S.C. 103(a) as 
being unpatentable over Stewart. Claims 41-43 and 144-146 stand rejected under 35 
U.S.C. 103(a) as being unpatentable over Stewart and further in view of Pasawicz ("The 
Importance of File Extensions"). 

Le Pennec describes a method and system for caching virus-free file 
certificates. Stewart describes an e-mail virus protection system including a sacrificial 
server. 
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Touboul describes a system and method for attaching a downloadable 
security profile to a downloadable, the system including an inspector and a protection 
engine. Pasawicz describes the use of file extensions and the potential damage that can 
result from not understanding their usage. 

Applicants express their appreciation to Examiners Matthew T. Henning 
and Syed Zia for the courtesy of an interview, which was granted to Applicants' 
representative, Sanford T. Colb (Reg. No. 26,856). The interview was held in the 
USPTO on December 14, 2005. The substance of the interview is set forth in the 
Interview Summary. 

At the interview, claim 1 was discussed vis-a-vis the prior art of Le 
Pennec. The Interview Summary Record states, in relevant part "Mr. Colb presented 
that one characteristic at two points in time is not the same as two different 
corresponding characteristics of a digital object. Examiner disagrees. However, the 
Examiner will further consider the definition of 'characteristic' and the argument upon 
receipt of a formal response." 

Applicant has accordingly amended independent claims 1, 45, 67 and 
185, as discussed at the interview, to include the recitation "examining at least two 
different corresponding characteristics of a digital object." 

Support for the amendment to the claims is found, inter alia, in Figs. 4A 
and 4B and the description thereof, specifically in paragraphs 44 and 45 of the 
application as filed. Additional support can be found in paragraph 42 of the application 
as filed. 

Applicant has similarly amended claims 23 and 126 to recite "obtaining 
information relating to at least two different corresponding characteristics of a digital 
object." 

Applicant respectfully submits that Le Pennec describes a method and 
system that utilizes only a single characteristic of a file - its digital signature. Le Pennec 
compares a digital signature of a file taken at a first point in time (A) with a digital 
signature of the same file taken at a second point in time (B). In contrast to Le Pennec, 
the present invention refers to obtaining and comparing at least two different 
corresponding characteristics. 
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Applicant respectfully submits that Stewart describes a system and 
method for disabling e-mail viruses by converting all files into non-executable code. In 
contrast to Stewart, the present invention refers to obtaining information relating to at 
least two different corresponding characteristics of a digital object and analyzing the 
information relating to the at least two different corresponding characteristics. 

As recited in the amended claims, the system and method of the present 
invention examine at least two different corresponding characteristics of a digital object, 
such as the file type and the file extension. Thus, if a file type, as indicated by the file 
header, is executable, but the file extension is "JPG", i.e. a multimedia file, the file is 
suspicious. The present invention thus compares two different corresponding 
characteristics to determine if a mismatch exists between the two characteristics. 

As discussed at the interview, Applicant respectfully submits that none of 
the prior art, either alone or in combination, shows or suggests a method of detecting 
malicious content including, inter alia, examining at least two different corresponding 
characteristics of a digital object, as recited in amended claims 1 and 45. Applicant 
respectfully submits that none of the prior art, either alone or in combination, shows or 
suggests a system for detecting malicious content including, inter alia, a digital object 
examiner, examining at least two different corresponding characteristics of a digital 
object, as recited in amended claims 67 and 185. 

Applicant respectfully submits that none of the prior art, either alone or 
in combination, shows or suggests a method of detecting malicious content including, 
inter alia, obtaining information relating to at least two different corresponding 
characteristics of a digital object, analyzing the information to categorize the digital 
object into at least two categories and comparing the at least two categories to decide 
whether there exists a mismatch therebetween, as recited in amended claim 23. 
Applicant respectfully submits that none of the prior art, either alone or in combination, 
shows or suggests a system for detecting malicious content including, inter alia, a digital 
object information obtainer, obtaining information related to at least two different 
corresponding characteristics of a digital object, a characteristic based categorizer, 
categorizing the information into at least two categories and a categories mismatch 
detector, analyzing the at least two categories to determine whether there exists a 
mismatch therebetween, as recited in amended claim 126. 
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Applicant respectfully submits that independent claims 1, 23, 45, 67, 126 
and 185 are therefore patentable. All of the claims depend directly or ultimately from 
one of claims 1, 23, 45, 67, 126 and 185 and recite additional patentable matter and are 
therefore deemed allowable. 

In view of the foregoing, all of the claims are deemed to be allowable. 
Favorable reconsideration and allowance of the application are respectfully requested. 
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